Analysis
- max time kernel
150s - max time network
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
27/10/2026, 04:25
Static task
static1
Behavioral task
behavioral1
Sample
لوكر MW3.rar
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
لوكر MW3.rar
Resource
win11ltsc2024-20260911-en
4 signatures
150 seconds
General
- Target لوكر MW3.rar
- Size 1.5MB
- Sample261027-e15w4abt6n
- SHA256 9b73154ee938ed7e0ef4a8838a6117944de5e9f2a6af640af254cfb555c697b0
- MD5 6735e3de7261f5e640aa0aa29dbd11a5
- SHA1 3f922d48998c77e4202892666931da5c20580990
- SHA512 2095011ba76fa60c373935833930e13e18b4b65d66e6d4cbc024b1b9b2f963591f6adff37ba5ebcafcd8523940601047eb997396ecd748b20d74d7e1d076322f
- SSDEEP 49152:MffyYDkl6yKwORDNx3JEPkItwKqfW43rtGUFd:Mfs6HRxx3uPkItwKq+4BGUFd
- TLSH T190753350DCCFABA8C771043B24B03A1185AFA76F9524A34798F5D51603D19E3ADBE22F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\ 7zFM.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2572 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 2572 7zFM.exe Token: 35 2572 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2572 7zFM.exe